kind: Deployment
apiVersion: apps/v1
metadata:
  annotations:
    admit-scoped.io: test-container
    admit.io: test-admit-app-spec-ann
    allowed-global.io: test-global
    allowed.io: test-allowed-app-spec-ann
    allowed-container.io: test-allowed-container-ann
  name: container-name
  namespace: app-created-namespace
  labels:
    "acorn.io/app-namespace": "app-namespace"
    "acorn.io/app-name": "app-name"
    "acorn.io/container-name": "container-name"
    "acorn.io/managed": "true"
    allowed-global.io: test-global
    allowed.io: test-allowed-app-spec-label
    permit-scoped.io: test-container
    permit.io: test-permit-app-spec-label
    permit-container.io: test-permit-container-label
spec:
  replicas: 1
  selector:
    matchLabels:
      "acorn.io/app-namespace": "app-namespace"
      "acorn.io/app-name": "app-name"
      "acorn.io/container-name": "container-name"
      "acorn.io/managed": "true"
  strategy:
    type: Recreate
  template:
    metadata:
      labels:
        "acorn.io/app-namespace": "app-namespace"
        "acorn.io/app-name": "app-name"
        "acorn.io/container-name": "container-name"
        "acorn.io/managed": "true"
        allowed-global.io: test-global
        allowed.io: test-allowed-app-spec-label
        permit-scoped.io: test-container
        permit.io: test-permit-app-spec-label
        permit-container.io: test-permit-container-label
      annotations:
        acorn.io/container-spec: '{"annotations":{"allowed-container.io":"test-allowed-container-ann"},"dirs":{"/var/tmp":{"secret":{},"volume":"foo"}},"image":"image-name","labels":{"permit-container.io":"test-permit-container-label"},"probes":null}'
        admit-scoped.io: test-container
        admit.io: test-admit-app-spec-ann
        allowed-global.io: test-global
        allowed.io: test-allowed-app-spec-ann
        allowed-container.io: test-allowed-container-ann
    spec:
      terminationGracePeriodSeconds: 5
      enableServiceLinks: false
      serviceAccountName: container-name
      hostname: container-name
      volumes:
        - name: foo
          persistentVolumeClaim:
            claimName: foo
      imagePullSecrets:
        - name: container-name-pull-1234567890ab
      containers:
        - name: container-name
          image: "image-name"
          volumeMounts:
            - mountPath: "/var/tmp"
              name: foo

